medium5.3
CVE-2022-25626
An unauthenticated user can access Identity Manager’s management console specific page URLs.
Impact
An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Symantec Identity Governance And Administration | Versions 14.3, 14.4 |